One of the most frequently encountered issues we see is that so often new clients find themselves using production API URIs. If your URI includes "data.guidetar.org" then you are pointing to production APIs. For QuickStart and Sandbox APIs make sure to use "quickstartdata.guidestar.org" and "sandboxdata.guidestar.org" respectively.